[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-talk] is Torbrowser more affected by webservers failing to send their complete certificate chain?


I assume that Torbrowser users are more affected by webservers 
that do not send their complete certificate chain (incl. interm. CAs)
due to the fact that torbrowser stores/caches less data (including certs?) persistently.

an example of a page that results in an TLS error page in Torbrowser due to incomplete cert. chain:


With the growing number of sites deploying HSTS, the impact is even bigger.

Should Torbrowser ship a few common interm. CAs by default? (like the letsencrypt issuing CAs)


Attachment: signature.asc
Description: OpenPGP digital signature

tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to